Hi,

On Wed, Mar 31, 2021 at 09:23:01PM +0200, Aleksandar Ivanisevic wrote:
> are there any restrictions on contacting the management interface from a 
> client-connect script?
> 
> tried everything i can think of: telnet, nc, socat, even curl, but although 
> everything works when calling the script from the command line, nothing comes 
> back from it when called from the server itself calls it, even ran an strace, 
> it connects and then just nothing comes back

Well, a "standard" client-connect script is synchronous, so while the
script runs, the server waits for the script to finish.  Thus, cannot
respond to management activities.

> any hints?
> 
> $ /usr/sbin/openvpn --version
> OpenVPN 2.4.9 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] 
> [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 21 2020

Use 2.5, which has asynchronous (deferred) client-connect scripts.

(Or, if openvpn does not need to wait for the result of the script,
just fork a background job from the script and return right away - this
works with 2.4 as well)

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to